/**
 * OWASP GoatDroid Project
 * 
 * This file is part of the Open Web Application Security Project (OWASP)
 * GoatDroid project. For details, please see
 * https://www.owasp.org/index.php/Projects/OWASP_GoatDroid_Project
 *
 * Copyright (c) 2011 - The OWASP Foundation
 * 
 * GoatDroid is published by OWASP under the GPLv3 license. You should read and accept the
 * LICENSE before you use, modify, and/or redistribute this software.
 * 
 * @author Jack Mannino, nVisium Security (https://www.nvisiumsecurity.com)
 * @created 2011
 */
package org.owasp.goatdroid.fourgoats.webservice.venues;

import java.sql.SQLException;
import java.util.ArrayList;
import org.owasp.goatdroid.fourgoats.webservice.Constants;
import org.owasp.goatdroid.fourgoats.webservice.Salts;
import org.owasp.goatdroid.fourgoats.webservice.login.LoginImpl;
import org.owasp.goatdroid.fourgoats.webservice.login.LoginUtils;
import org.owasp.goatdroid.fourgoats.webservice.validators.Validators;
import org.owasp.goatdroid.fourgoats.webservice.venues.beans.VenueListBean;
import org.owasp.goatdroid.fourgoats.webservice.venues.beans.VenuesBean;

public class VenuesImpl {

	static public VenuesBean addVenue(String sessionToken, String venueName,
			String venueWebsite, String latitude, String longitude) {

		VenuesBean bean = new VenuesBean();
		ArrayList<String> errors = new ArrayList<String>();
		if (LoginImpl.isSessionValid(sessionToken)
				&& Validators.validateSessionTokenFormat(sessionToken)) {
			if (Validators.validateAddVenueValues(venueName, venueWebsite,
					latitude, longitude).size() == 0) {
				try {
					VenuesDAO dao = new VenuesDAO();
					if (!dao.doesVenueExist(venueName, latitude, longitude)) {
						String venueID = LoginUtils.generateSaltedSHA256Hash(
								venueName, Salts.VENUE_ID_GENERATOR_SALT);
						dao.insertNewVenue(venueID, venueName, venueWebsite,
								latitude, longitude);
						dao.closeConnection();
						bean.setSuccess(true);
						return bean;
					} else {
						errors.add(Constants.VENUE_ALREADY_EXISTS);
						dao.closeConnection();
					}
				} catch (InstantiationException e) {
					errors.add(Constants.UNEXPECTED_ERROR);
				} catch (IllegalAccessException e) {
					errors.add(Constants.UNEXPECTED_ERROR);
				} catch (ClassNotFoundException e) {
					errors.add(Constants.UNEXPECTED_ERROR);
				} catch (SQLException e) {
					errors.add(Constants.UNEXPECTED_ERROR);
				}
			} else
				errors.add(Constants.UNEXPECTED_ERROR);

		} else
			errors.add(Constants.INVALID_SESSION);

		bean.setSuccess(false);
		bean.setErrors(errors);
		return bean;
	}

	static public VenueListBean getAllVenues(String sessionToken) {

		VenueListBean bean = new VenueListBean();
		ArrayList<String> errors = new ArrayList<String>();
		if (LoginImpl.isSessionValid(sessionToken)
				&& Validators.validateSessionTokenFormat(sessionToken)) {
			try {
				VenuesDAO dao = new VenuesDAO();
				bean.setVenues(dao.getAllVenues());
				dao.closeConnection();
				bean.setSuccess(true);
				return bean;
			} catch (InstantiationException e) {
				errors.add(Constants.UNEXPECTED_ERROR);
			} catch (IllegalAccessException e) {
				errors.add(Constants.UNEXPECTED_ERROR);
			} catch (ClassNotFoundException e) {
				errors.add(Constants.UNEXPECTED_ERROR);
			} catch (SQLException e) {
				errors.add(Constants.UNEXPECTED_ERROR);
			}

		} else
			errors.add(Constants.INVALID_SESSION);

		bean.setSuccess(false);
		bean.setErrors(errors);
		return bean;
	}
}
